This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json) Hash identifier: YzCM6gHRxW1RW2EBWGxl4BG0WbbTINGlkl19RWdTrus= Subject key identifier: 84:99:01:A6:00:61:14:95:CD:50:45:D8:C8:6D:E1:23:E4:3E:47:30 Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Certificate serial: 019AF3C0268E6EF43DE357D0A495AC2E45F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft Manifest number: 0E34 Signing time: Sat 06 Dec 2025 13:00:47 +0000 Manifest this update: Sat 06 Dec 2025 13:00:47 +0000 Manifest next update: Sun 07 Dec 2025 13:00:47 +0000 Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=) 2: S3WGMPY-OzezhDsk-gOqjIT9wqE.roa (hash: B0hQgvaTLIn8DwMEJturhomMZwtDUgE45NKruZhEvSo=) 3: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=) 4: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: 91yfBHQlL8xsqKtDZxR/yMAej6fJ7pTtJL7rA8g27cM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:26:8e:6e:f4:3d:e3:57:d0:a4:95:ac:2e:45:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Validity Not Before: Dec 6 13:00:47 2025 GMT Not After : Dec 7 13:00:47 2025 GMT Subject: CN=849901a600611495cd5045d8c86de123e43e4730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:5a:f3:66:16:32:fa:ac:f7:2e:c3:33:87: 1f:9f:60:1c:9a:df:3e:d0:8f:2f:86:10:b5:19:4d: 1b:08:ee:96:b5:70:7a:b5:79:1b:b7:47:98:eb:31: 85:d3:c6:74:22:80:4a:ff:c6:3b:9d:a5:fd:02:d3: a7:08:f4:09:dd:6b:1c:8e:75:ee:f3:9e:73:e0:1b: cd:b2:7b:22:c1:ba:55:6a:fb:b9:f2:41:66:bb:2d: 8d:9a:bb:99:f7:5f:72:af:de:c6:d8:0b:b3:fd:f4: fe:03:1c:fe:77:53:c9:d2:23:a8:86:dc:3f:c9:e6: c6:65:ca:bb:d3:7d:69:f7:4b:18:66:06:3f:ab:d5: 69:3d:b0:c1:ca:58:f0:ab:81:93:f3:06:8d:e9:ba: 71:6b:5e:93:89:94:cc:ff:07:e3:f1:31:97:71:8a: a7:2b:0a:7b:b0:4d:20:fa:98:d2:a6:ba:bc:d7:b8: b9:ac:46:60:b4:15:51:6b:b1:65:9a:9b:9b:97:89: 50:50:d6:5d:4d:c8:a1:91:2f:49:22:94:5f:a1:13: 3a:bf:17:92:6c:c4:3f:c1:5b:5a:59:02:11:da:2c: f8:df:59:4d:7e:17:ae:ea:41:89:17:e6:a5:89:dc: 26:89:a9:65:43:ea:05:b0:0b:04:fb:d5:30:64:a2: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:99:01:A6:00:61:14:95:CD:50:45:D8:C8:6D:E1:23:E4:3E:47:30 X509v3 Authority Key Identifier: keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:90:5d:cb:f3:13:f1:1f:ce:46:0e:3d:ee:83:16:04:42:2c: ea:64:8c:09:eb:54:a6:1f:1d:a5:77:3d:ff:83:95:d6:c2:de: 80:1c:16:9e:0f:a4:ad:8e:84:5f:be:15:9b:68:3f:55:fd:ed: 49:29:cb:3b:18:dc:f9:a3:a5:f4:9a:01:54:84:10:78:2d:cf: b8:d1:78:3d:8e:6f:df:3b:89:29:5c:0d:3d:59:ba:8c:b5:9a: a0:1a:4a:e6:fc:00:2d:f1:96:c0:ec:78:75:06:26:89:e6:b3: 12:d0:40:16:2f:5b:b1:1b:85:74:18:9f:e1:a7:c2:60:f6:c5: 4b:07:a2:ed:53:51:d8:87:b1:3e:9f:be:dc:17:13:52:19:d3: 0f:35:fb:71:9c:86:c7:a9:96:9d:18:f3:6b:d6:c7:c3:59:02: 31:fc:17:86:72:e7:31:e8:9f:32:9e:87:dc:10:c4:0a:03:bc: 4d:1b:15:cd:2e:b8:5b:c6:1f:8c:8b:c8:f1:78:72:5e:d7:16: 3c:ea:7e:2a:24:54:a1:d5:fa:06:0d:d6:a9:e4:f8:a6:6b:54: 82:45:3d:20:70:fd:5f:a1:21:ac:70:19:fd:85:96:e7:53:fd: 50:9d:fc:47:1e:fa:cb:f7:f3:e2:b8:86:7b:aa:d0:84:69:cd: a9:a1:71:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwCaObvQ941fQpJWsLkX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk MTg3YmMwHhcNMjUxMjA2MTMwMDQ3WhcNMjUxMjA3MTMwMDQ3WjAzMTEwLwYDVQQD Eyg4NDk5MDFhNjAwNjExNDk1Y2Q1MDQ1ZDhjODZkZTEyM2U0M2U0NzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrBa82YWMvqs9y7DM4cfn2Acmt8+ 0I8vhhC1GU0bCO6WtXB6tXkbt0eY6zGF08Z0IoBK/8Y7naX9AtOnCPQJ3WscjnXu 855z4BvNsnsiwbpVavu58kFmuy2NmruZ919yr97G2Auz/fT+Axz+d1PJ0iOohtw/ yebGZcq7031p90sYZgY/q9VpPbDByljwq4GT8waN6bpxa16TiZTM/wfj8TGXcYqn Kwp7sE0g+pjSprq817i5rEZgtBVRa7Flmpubl4lQUNZdTcihkS9JIpRfoRM6vxeS bMQ/wVtaWQIR2iz431lNfheu6kGJF+alidwmiallQ+oFsAsE+9UwZKIvMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISZAaYAYRSVzVBF2Mht4SPkPkcwMB8GA1UdIwQY MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt ODc3NTBkNmY3N2E4LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4 LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJBdy/MT 8R/ORg497oMWBEIs6mSMCetUph8dpXc9/4OV1sLegBwWng+krY6EX74Vm2g/Vf3t SSnLOxjc+aOl9JoBVIQQeC3PuNF4PY5v3zuJKVwNPVm6jLWaoBpK5vwALfGWwOx4 dQYmieazEtBAFi9bsRuFdBif4afCYPbFSwei7VNR2IexPp++3BcTUhnTDzX7cZyG x6mWnRjza9bHw1kCMfwXhnLnMeifMp6H3BDECgO8TRsVzS64W8YfjIvI8XhyXtcW POp+KiRUodX6Bg3WqeT4pmtUgkU9IHD9X6EhrHAZ/YWW51P9UJ38Rx76y/fz4riG e6rQhGnNqaFxtw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:53:53 2025 by rpki-client